WO2017032192A1

WO2017032192A1 - Encryption state detection method and system

Info

Publication number: WO2017032192A1
Application number: PCT/CN2016/090715
Authority: WO
Inventors: 李彬; 林强生; 张龙华; 向建中; 薄景仁
Original assignee: 广州视睿电子科技有限公司
Priority date: 2015-08-26
Filing date: 2016-07-20
Publication date: 2017-03-02
Also published as: CN105071993B; CN105071993A

Abstract

The present invention relates to an encryption state detection method and system. The method comprises: displaying a login webpage interface via a client, and receiving an encryption key and sending same to a server; detecting whether there is an accessed hardware unlock device via the server to obtain a detection result; judging whether the encryption key has a display right via the server according to the detection result, and generating a judgement result and sending same to the client; and pushing the judgement result via the client. Whether an encryption key has a display right is judged by combining software with hardware, and a judgement result is pushed to inform a user whether restricted access exists to restrict a login person, thereby avoiding leakage of access contents and improving encryption security.

Description

Encrypted state detection method and system

Technical field

The present invention relates to the field of network information security technologies, and in particular, to an encryption state detection method and system.

Background technique

At present, with the increasing use of Internet technology, many daily work and entertainment are carried out on the Internet. People browse the web through a web browser to get useful information and data for online contact and communication.

Traditional web encryption is limited to a single software encryption method. The encryption method mainly protects information such as passwords. The content in the WEB background is easily attacked and crawled by crawlers, malware, search engines, etc., resulting in insecure information.

Summary of the invention

Based on this, it is necessary to provide an encryption state detection method and system for improving encryption security in response to the above problems.

An encryption state detection method includes the following steps:

Display the login web interface through the client, receive the encryption key and send it to the server;

The server detects whether there is an access unlocking hardware device, and obtains a detection result;

Determining, by the server, whether the encryption key has display authority according to the detection result, and generating a determination result and sending the result to the client;

The judgment result is pushed by the client.

An encryption state detection system includes:

The login module is configured to display the login webpage interface through the client, receive the encryption key, and send the encryption key to the server;

a detecting module, configured to detect, by the server, whether an unlocking hardware device is accessed, and obtain a detection result;

a determining module, configured to determine, by the server, whether the encryption key has display permission according to the detection result, and generate a determination result and send the result to the client;

a pushing module, configured to push the determination result by the client.

The above-mentioned encryption state detecting method and system, through the client displaying the login webpage interface, receiving the encryption key and transmitting it to the server; and detecting whether there is access to the unlocking hardware device through the server, the detection result is obtained. The server determines whether the encryption key has display permission according to the detection result, and generates a judgment result to be sent to the client; and the judgment result is pushed by the client. The software combines hardware to determine whether the encryption key has display permission, and pushes the judgment result to inform the user whether there is restricted access, restricts the login personnel, avoids leakage of access content, and improves encryption security.

DRAWINGS

1 is a flowchart of an encryption state detecting method in an embodiment;

2 is a flowchart of a method for detecting an encryption state in another embodiment;

3 is a structural diagram of an encryption state detecting system in an embodiment;

4 is a structural diagram of an encryption state detecting system in another embodiment.

detailed description

An encryption state detection method, which can be applied to web content access, or content access of other applications. As shown in FIG. 1, the encryption state detection method includes the following steps:

Step S140: The login webpage interface is displayed by the client, and the encryption key is received and sent to the server.

The client may be a terminal device such as a desktop computer or a notebook computer, and the server may be a background server or the like. The client displays the login webpage interface. The user can enter the encryption key in the dialog box of the login webpage interface. The client receives the encryption key and sends it to the server. Further, when the user inputs the encryption key, the client may also query the WAN server for the corresponding restriction information, and automatically send the restriction information to the server in the background.

Step S150: The server detects whether there is an access unlocking hardware device, and obtains a detection result.

The user logs into the web page of a background server and can use the corresponding unlock hardware device. It can be known that the detection result includes two types: the server accesses the unlocked hardware device, or the server does not access the unlocked hardware device. If the server has the corresponding unlock hardware device, the restriction information can be unlocked; otherwise, the user cannot perform the limited operation.

Step S160: The server determines whether the encryption key has display authority according to the detection result, and generates a determination result and sends the result to the client.

According to the detection result of the unlocked hardware device, the software combines the hardware to determine the authority of the encryption key to obtain a judgment result. In one embodiment, in step S160, the server determines whether the encryption key has display authority according to the detection result, and specifically includes steps 162 to 168.

Step 162: If the server has an access unlocking hardware device, obtain unlock data pre-stored by the unlocking hardware device. If an unlocked hardware device is detected, the unlock data stored therein is extracted.

Step 164: Determine whether the encryption key has display authority according to the unlocking data, and obtain a determination result. The unlocking data may specifically include the number of users and the number of management terminals, etc. The number of users is used to limit the number of user logins, and the number of management terminals is used to limit the number of clients that log in to the same user. When the client sends the encryption key, the restriction information obtained by the query may be sent to the server at the same time, and the server compares the unlock data with the restriction information, and determines the authority of the encryption key based on the unlock data. For example, if the number of user logins in the unlocked hardware device is 1, only one user can log in. The server backend records how many logins are in the same account. If the same user logs in again, it will be kicked off the line, that is, it does not have display permission. The number of management terminals is similar. Not only that, but the unlocking hardware device can also store other data to make more restrictions.

Further, step 164 may include the step of detecting whether the number of logins of the encryption key is greater than the number of permissions defined by the unlock data. If yes, the encryption key does not have display permission; if not, the encryption key has display permission, and the judgment result is obtained. By comparing the number of logins of the encryption key and the number of permissions defined by the unlocking data, it is determined whether the login encryption key has display permission, and the judgment result is obtained.

Step 166: If the server does not access the unlocking hardware device, obtain the restriction information corresponding to the encryption key. If the server does not access the unlocking hardware device, obtain the restriction information corresponding to the initial encryption key.

Step 168: Determine whether the encryption key has display authority according to the restriction information, and obtain a determination result. Similarly, the restriction information may also include the number of users and the number of management terminals. Step 168 is the same The method may include the following steps: detecting whether the number of logins of the encryption key is greater than the number of permissions defined by the restriction information; if yes, the encryption key does not have the display permission; if not, the encryption key has the display permission, and the determination result is obtained. By comparing the number of logins of the encryption key with the number of permissions defined by the restriction information, it is determined whether the login encryption key has display permission, and the judgment result is obtained.

Further, after step 168, step S160 further includes the step of transmitting the determination result to the client. The obtained judgment result is sent to the client for pushing.

In this embodiment, according to the actual situation that the server is connected to the unlocked hardware device, the unlocking data and the restriction information are respectively used to determine whether the encryption key has display permission. Since the unique hardware identification information of the client stored in the WAN is matched with the encryption key. When the user logs in, the server backend can query the information in the WAN server to know the number of users who have logged in the encryption key and the number of management terminals, and can realize the access restriction on the logged-in person.

Step S170: Push the judgment result by the client. Use the client to push the judgment result to inform the user whether there is a restriction on the display access. Taking web content access as an example, the push judgment result may specifically display relevant information through the customer page, such as displaying information such as “having page display permission” or “not having page display permission”; or may notify the user by voice broadcast or other means. critical result.

The above-mentioned encryption state detecting method determines whether the encryption key has display authority through software and hardware, and pushes the judgment result to inform the user whether there is restricted access, restricts the login personnel, avoids leakage of access content, and improves encryption security.

In one embodiment, after step S150, the encryption state detecting method further includes the following steps:

The server authenticates the encryption key according to the preset key list, and obtains the authentication result. In the step S160, the server determines whether the encryption key has the display authority according to the detection result. The server determines whether the encryption key has display authority according to the detection result and the authentication result. After receiving the encryption key on the server, the decryption application can be started and the encryption key can be passed in, the decryption application can be used to detect whether the unlocked hardware device is inserted, and whether the encryption key is valid.

Further, the step of authenticating the encryption key according to the preset key list by the server to obtain the authentication result includes: determining whether the encryption key is stored in the key list; if yes, the encryption key is correct Key; if not, the encryption key is the wrong key and the authentication result is obtained. In After the detection result is obtained, the encryption key is also authenticated to confirm the validity of the encryption key. For example, the server can store the encrypted encryption key in the key list, and after receiving the encryption key sent by the client, determine whether it is stored in the key list. If yes, the encryption key is valid. If not, then The encryption key is invalid.

The server determines whether the encryption key has display permission according to the detection result and the authentication result. Specifically, the encryption key is first compared with the unlock data or the restriction information. For details, refer to step 162 to step 168. For example, if the number of logins of the encryption key is not greater than the number of permissions defined by the unlock data or the restriction information, the encryption key may be considered to have a preliminary authority. If the encryption key is detected to be valid, the encryption key is finally confirmed to have the display authority.

In this embodiment, after the detection result is obtained, the encryption key is also authenticated to confirm the validity of the encryption key. Combine the detection result and the authentication result to confirm the permission of the encryption key, that is, when both the above conditions are satisfied, the encryption key has the authority, and if there is a condition that is not satisfied, the encryption key does not have the authority, and the encryption security can be further improved. Sex.

In one embodiment, as shown in FIG. 2, before step S140, the encryption state detecting method further includes steps S110 to S130.

Step S110: Display the registration page through the client, and receive the username information. Specifically, when the user starts the client for the first time, the registration process is automatically invoked through the service process, and the registered name input by the user is used as the user name information.

Step S120: The hardware identification information is read by the client, and the username information and the hardware identification information are sent to the server. The hardware identification information of the client is also read by the service process, and the user name information and the hardware identification information are sent to the server. In addition, the hardware identification information of the client may be sent to the WAN server for storage to be called again.

Step S130: matching the username information and the hardware identifier information by the server, and storing the username information as an encryption key. The server matches the username information and the hardware identification information. If the matching is successful, the user is successfully registered and can be used for logging in elsewhere, and the username is stored as an encryption key.

Steps S110 to S130 provide a user registration function to facilitate management of the login personnel. There are restrictions on the corresponding settings of each registered user, for example, how many software can be opened at the same time, up to a few When people use the same at the same time, these restrictions can be unlocked by accessing the unlocking hardware device at the server.

In one embodiment, after step S170, the encryption state detecting method further includes the following steps:

If the result of the judgment is that the encryption key has display authority, the client displays the access content after receiving the display instruction.

If the encryption key that the user logs in has the display permission, after the client pushes the judgment result, the user can input a display instruction through the client, and control the client to display the access content for the user to view, thereby improving the convenience of operation.

The invention also provides an encryption state detection system, which can be applied to web content access, or content access of other applications. As shown in FIG. 3, the encryption state detection system includes a login module 140, a detection module 150, a determination module 160, and a push module 170.

The login module 140 is configured to display the login webpage interface through the client, receive the encryption key, and send the encryption key to the server.

The detecting module 150 is configured to detect, by the server, whether there is an access unlocking hardware device, and obtain a detection result.

The determining module 160 is configured to determine, by the server according to the detection result, whether the encryption key has display permission, and generate a determination result and send the result to the client.

According to the detection result of the unlocked hardware device, the software determines the permission of the encryption key in combination with the hardware. critical result. In one of the embodiments, the determining module 160 includes a first processing unit, a first determining unit, a second processing unit, a second determining unit, and a transmitting unit.

The first processing unit is configured to acquire unlock data pre-stored by the unlocking hardware device when the server has access to the unlocking hardware device. If an unlocked hardware device is detected, the unlock data stored therein is extracted.

The first determining unit is configured to determine, according to the unlocking data, whether the encryption key has display authority, and obtain a determination result. The unlocking data may specifically include the number of users and the number of management terminals, etc. The number of users is used to limit the number of user logins, and the number of management terminals is used to limit the number of clients that log in to the same user. When the client sends the encryption key, the restriction information obtained by the query may be sent to the server at the same time, and the server compares the unlock data with the restriction information, and determines the authority of the encryption key based on the unlock data. For example, if the number of user logins in the unlocked hardware device is 1, only one user can log in. The server background records how many logins are in the same account. If the same user logs in again, it will be kicked off the line, that is, there is no display permission. The number of management terminals is similar. Not only that, but the unlocking hardware device can also store other data to make more restrictions.

Further, the first determining unit determines whether the encryption key has display authority according to the unlocking data, and the obtaining the determining result specifically includes: detecting whether the number of logins of the encryption key is greater than the number of times defined by the unlocking data. If yes, the encryption key does not have display permission; if not, the encryption key has display permission, and the judgment result is obtained. By comparing the number of logins of the encryption key and the number of permissions defined by the unlocking data, it is determined whether the login encryption key has display permission, and the judgment result is obtained.

The second processing unit is configured to obtain the restriction information corresponding to the encryption key when the server does not access the unlocking hardware device. If the server does not access the unlocking hardware device, obtain the restriction information corresponding to the initial encryption key.

The second determining unit is configured to determine, according to the restriction information, whether the encryption key has display permission, and obtain a determination result. Similarly, the restriction information may also include the number of users and the number of management terminals. The second judging unit judges whether the encryption key has the display authority according to the restriction information, and the determining result may include: detecting whether the number of logins of the encryption key is greater than the number of times of the restriction defined by the restriction information; if yes, the encryption key does not have the display permission; If not, the encryption key has display permission and the judgment result is obtained. By comparing the number of logins of the encryption key with the number of permissions defined by the restriction information, it is determined whether the login encryption key has display permission, and the judgment result is obtained.

The sending unit is configured to send the judgment result to the client.

The push module 170 is configured to push the judgment result through the client. Use the client to push the judgment result to inform the user whether there is restricted access. Taking web content access as an example, the push judgment result may specifically display relevant information through the customer page, such as displaying information such as “having page display permission” or “not having page display permission”; or may notify the user by voice broadcast or other means. critical result.

The above-mentioned encryption state detection system determines whether the encryption key has display authority through software and hardware, and pushes the judgment result to inform the user whether there is restricted access, restricts the login personnel, avoids leakage of access content, and improves encryption security.

In one embodiment, the encryption state detection system further includes a key authentication module, and the key authentication module is configured to detect, by the server, whether the access device unlocks the hardware device through the server, and obtains the detection result, and then The key list is set to authenticate the encryption key and obtain the authentication result. The determining module 160 determines whether the encryption key has the display authority according to the detection result, and determines whether the encryption key has the display authority according to the detection result and the authentication result by the server. After receiving the encryption key on the server, the decryption application can be started and the encryption key can be passed in, the decryption application can be used to detect whether the unlocked hardware device is inserted, and whether the encryption key is valid.

Further, the key authentication module authenticates the encryption key according to the preset key list by the server, and the obtaining the authentication result specifically includes: determining whether the encryption key is stored in the key list; if yes, the encryption key is correct Key; if not, the encryption key is the wrong key and the authentication result is obtained. After the detection result is obtained, the encryption key is also authenticated to confirm the validity of the encryption key. For example, the server can store the encrypted encryption key in the key list, and after receiving the encryption key sent by the client, determine whether it is stored in the key list. If yes, the encryption key is valid. If not, then The encryption key is invalid.

The server determines whether the encryption key has display permission according to the detection result and the authentication result. Specifically, the encryption key is first compared with the unlock data or the restriction information. For example, if the number of logins of the encryption key is not greater than the number of permissions defined by the unlock data or the restriction information, the encryption key may be considered to have a preliminary authority. If the encryption key is detected to be valid, the encryption key is finally confirmed to have the display authority.

In one embodiment, as shown in FIG. 4, the encryption status detection system further includes a registration page display module 110, an identification information reading module 120, and an information matching storage module 130.

The registration page display module 110 is configured to: after the login module 140 displays the login webpage interface through the client, receive the encryption key and send it to the server, display the registration page through the client, and receive the username information. Specifically, when the user starts the client for the first time, the registration process is automatically invoked through the service process, and the user inputs the registration name as the user name information.

The identification information reading module 120 is configured to read the hardware identification information by using the client, and send the user name information and the hardware identification information to the server. The hardware identification information of the client is also read by the service process, and the user name information and the hardware identification information are sent to the server. In addition, the hardware identification information of the client may be sent to the WAN server for storage to be called again.

The information matching storage module 130 is configured to match the username information and the hardware identification information by using the server, and store the username information as an encryption key. The server matches the username information and the hardware identification information. If the matching is successful, the user is successfully registered and can be used for logging in elsewhere, and the username is stored as an encryption key.

In this embodiment, a user registration function is provided to facilitate management of the login personnel. There are restrictions on the corresponding settings of each registered user. For example, how many software can be opened at the same time, and up to several people can use it at the same time. These restrictions can be unlocked by accessing the unlocking hardware device on the server.

In one embodiment, the encryption status detection system further includes a page display module, and the page display module is configured to: after the push module 170 pushes the determination result through the client, if the determination result is encrypted The key has display permission, and the client displays the access content after receiving the display instruction.

The technical features of the above-described embodiments may be arbitrarily combined. For the sake of brevity of description, all possible combinations of the technical features in the above embodiments are not described. However, as long as there is no contradiction between the combinations of these technical features, All should be considered as the scope of this manual.

The above-described embodiments are merely illustrative of several embodiments of the present invention, and the description thereof is more specific and detailed, but is not to be construed as limiting the scope of the invention. It should be noted that a number of variations and modifications may be made by those skilled in the art without departing from the spirit and scope of the invention. Therefore, the scope of the invention should be determined by the appended claims.

Claims

An encryption state detecting method, comprising the steps of:

Display the login web interface through the client, receive the encryption key and send it to the server;

The server detects whether there is an access unlocking hardware device, and obtains a detection result;

Determining, by the server, whether the encryption key has display authority according to the detection result, and generating a determination result and sending the result to the client;

The judgment result is pushed by the client.
The encryption state detecting method according to claim 1, wherein the server determines whether the encryption key has display authority according to the detection result, and includes the following steps:

Obtaining unlock data pre-stored by the unlocking hardware device, if the server has an access unlocking hardware device;

Determining, according to the unlocking data, whether the encryption key has display authority, and obtaining the determination result;

Obtaining the restriction information corresponding to the encryption key if the server is not connected to the unlocking hardware device;

Determining whether the encryption key has display authority according to the restriction information, and obtaining the determination result.
The encryption state detecting method according to claim 2, wherein the step of determining whether the encryption key has display authority based on the unlocking data, and obtaining the determination result comprises the following steps:

Detecting whether the number of logins of the encryption key is greater than the number of permissions defined by the unlocking data;

If yes, the encryption key does not have display permission;

If not, the encryption key has display authority, and the determination result is obtained.
The method for detecting an encryption state according to claim 1, wherein after the server detects whether there is an access unlocking hardware device and obtains the detection result, the method further includes the following steps:

The server encrypts the encryption key according to a preset key list, and obtains an authentication result;

Determining, by the server, whether the encryption key has a display according to the detection result The authority is that the server determines whether the encryption key has display authority according to the detection result and the authentication result.
The method for detecting an encryption state according to claim 4, wherein the step of the server determining the authentication of the encryption key according to the preset key list to obtain the authentication result comprises the following steps:

Determining whether the encryption key is stored in the key list;

If yes, the encryption key is a correct key;

If not, the encryption key is an error key, and the authentication result is obtained.
The encryption state detecting method according to claim 1, wherein before the step of displaying the login webpage interface by the client, receiving the encryption key, and transmitting to the server, the method further comprises the following steps:

Receiving the user name information by displaying the registration page by the client;

Reading, by the client, hardware identification information, and sending the username information and hardware identification information to the server;

The user name information and the hardware identification information are matched by the server, and the user name information is stored as an encryption key.
The encryption state detecting method according to claim 1, wherein after the step of pushing the determination result by the client, the method further comprises the following steps:

If the result of the determination is that the encryption key has display authority, the client displays the access content after receiving the display instruction.
An encryption state detection system, comprising:

The login module is configured to display the login webpage interface through the client, receive the encryption key, and send the encryption key to the server;

a detecting module, configured to detect, by the server, whether an unlocking hardware device is accessed, and obtain a detection result;

a determining module, configured to determine, by the server, whether the encryption key has display permission according to the detection result, and generate a determination result and send the result to the client;

a pushing module, configured to push the determination result by the client.
The encryption state detection system according to claim 8, further comprising:

The registration page display module is configured to: after the login module displays the login webpage interface through the client, receive the encryption key and send it to the server, display the registration page through the client, and receive the username information;

An identifier information reading module, configured to read hardware identification information by using the client, and send the user name information and hardware identification information to the server;

The information matching storage module is configured to match the username information and the hardware identifier information by using the server, and store the username information as an encryption key.
The encryption state detection system according to claim 8, further comprising a page display module, wherein the page display module is configured to: after the pushing module pushes the determination result by the client, if the determination result is The encryption key has display rights through which the client displays the access content after receiving the display instruction.